{
  "_pruva_terminal_reconciliation": {
    "authored_artifact_closure_sha256": "964277721d4ceb37dbd61f47597f32143eb38f65cffdca10fc974ee60d6afbf5",
    "authored_runtime_manifest_sha256": "4b5c9655f949a91fd3d96d512095cab248810957b802ec7576d3365903538801",
    "authored_verdict_sha256": "8e27317825f135d5e8f0b9b01584e8abed043b6eaa41640b4327a9edf9102775",
    "claim_matching": "evaluated",
    "schema_version": 2,
    "status": "completed"
  },
  "accepted_exploit_knowledge_record_ids": [
    "0d30d380-9682-4bb7-ae07-1ae71084ee98",
    "490be5b8-e9cd-403f-9655-eea6c90e2dc1"
  ],
  "attacker_controlled_input": "Unprivileged local process: 8 bytes spliced from a read-only root-owned file page (plus a 514-byte attacker vector) sent as a UDP datagram, plus the attacker's own namespace setup (unshare user+net, nlmon0, XFRM ESP state/policy, nftables queue 0, tc pedit + mirred redirect). No privileged input and no KASLR leak is needed.",
  "claim_outcome": "confirmed",
  "claimed_impact_class": "privilege_escalation",
  "claimed_surface": "local_only",
  "crash_observed": false,
  "end_to_end_target_reached": true,
  "evidence_scope": "production_path",
  "exploit_chain_demonstrated": true,
  "exploitability_confidence": "high",
  "inferred": false,
  "observed_impact_class": "privilege_escalation",
  "read_write_primitive_observed": true,
  "repro_result": "confirmed",
  "sanitizer_used": false,
  "trigger_path": "splice(file page)->UDP->LOCAL_OUT nft queue 0->nfqnl_build_packet_message()->skb_zerocopy() (drops SKBFL_SHARED_FRAG)->netlink tap->nlmon0->tc pedit (96-byte linear prefix rewritten into eth|IPv4|ESP|IV|ciphertext)->mirred egress redirect lo->loopback RX->xfrm4_policy_check/esp4_rcv->esp_input() skips skb_cow_data()->authenticated AES-CBC decrypt in place over the page-cache frags",
  "validated_surface": "local_only"
}